A persistent, non-reassigned, privacy-preserving identifier for a user
shared between an identity provider and service provider. An identity
provider uses the appropriate value of this attribute when communicating
with a particular service provider or group of service providers, and
does not reveal that value to any other service provider except in
limited circumstances.